AI Security Planner

Demo data. Any changes do not save and are reset on refresh.

Identity Access Modernization

Organization
Demo
Unit
Not attached
Site
Chicago

Gantt

Current planGenerated baselineTodayCritical pathComplete
IA-P1Govern identity scope and ownership
Planned
IA-P1-M01Name the sponsor, program owner, and identity decision rights
CompleteActual completionNot scheduled
IA-P1-M02Define the workforce, contractor, service, and privileged identity scope
Planned
IA-P1-M03Identify authoritative identity sources and account owners
Planned
IA-P2Control identity lifecycle and operations
Planned
IA-P2-M04Define joiner, mover, and leaver handling goals
Planned
IA-P2-M10Establish service-account ownership and credential lifecycle rules
Planned
IA-P2-M11Establish third-party identity sponsorship and expiration rules
Planned
IA-P2-M14Establish periodic access and entitlement reviews
Planned
IA-P2-M18Define operating metrics, review cadence, and transition to routine operations
Planned
IA-P3Protect authentication and privileged access
Planned
IA-P3-M05Establish a repeatable privileged-account inventory process
Planned
IA-P3-M06Separate daily-use and administrative identities
Planned
IA-P3-M07Set authentication requirements by access risk
Planned
IA-P3-M08Establish phishing-resistant authentication for high-risk access
Planned
IA-P3-M09Define emergency-access accounts and recovery controls
Planned
IA-P3-M12Define a protected path for administrative access
Planned
IA-P3-M13Establish privileged-secret rotation and revocation rules
Planned
IA-P3-M15Centralize important authentication and privilege event logs
Planned
IA-P3-M16Define identity incident triage, containment, and recovery
Planned
IA-P3-M17Pilot the controls with one bounded user or administrator group
Planned
Govern identity scope and ownership
Forecast
December 4, 2026
IA-P1-M02, Define the workforce, contractor, service, and privileged identity scope
Forecast
November 20, 2026
Generated baseline
September 11, 2026
IA-P1-M03, Identify authoritative identity sources and account owners
Forecast
December 4, 2026
Generated baseline
September 25, 2026
Control identity lifecycle and operations
Forecast
July 2, 2027
IA-P2-M04, Define joiner, mover, and leaver handling goals
Forecast
December 18, 2026
Generated baseline
October 9, 2026
IA-P2-M10, Establish service-account ownership and credential lifecycle rules
Forecast
March 12, 2027
Generated baseline
January 1, 2027
IA-P2-M11, Establish third-party identity sponsorship and expiration rules
Forecast
March 26, 2027
Generated baseline
January 15, 2027
IA-P2-M14, Establish periodic access and entitlement reviews
Forecast
May 7, 2027
Generated baseline
February 26, 2027
IA-P2-M18, Define operating metrics, review cadence, and transition to routine operations
Forecast
July 2, 2027
Generated baseline
April 23, 2027
Protect authentication and privileged access
Forecast
June 18, 2027
IA-P3-M05, Establish a repeatable privileged-account inventory process
Forecast
January 1, 2027
Generated baseline
October 23, 2026
IA-P3-M06, Separate daily-use and administrative identities
Forecast
January 15, 2027
Generated baseline
November 6, 2026
IA-P3-M07, Set authentication requirements by access risk
Forecast
January 29, 2027
Generated baseline
November 20, 2026
IA-P3-M08, Establish phishing-resistant authentication for high-risk access
Forecast
February 12, 2027
Generated baseline
December 4, 2026
IA-P3-M09, Define emergency-access accounts and recovery controls
Forecast
February 26, 2027
Generated baseline
December 18, 2026
IA-P3-M12, Define a protected path for administrative access
Forecast
April 9, 2027
Generated baseline
January 29, 2027
IA-P3-M13, Establish privileged-secret rotation and revocation rules
Forecast
April 23, 2027
Generated baseline
February 12, 2027
IA-P3-M15, Centralize important authentication and privilege event logs
Forecast
May 21, 2027
Generated baseline
March 12, 2027
IA-P3-M16, Define identity incident triage, containment, and recovery
Forecast
June 4, 2027
Generated baseline
March 26, 2027
IA-P3-M17, Pilot the controls with one bounded user or administrator group
Forecast
June 18, 2027
Generated baseline
April 9, 2027

Recommendations

Recommendations requiring attention
Actions
Chicago
Identity Access ModernizationProgram
USD 95M
Close the 4.5 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.4.5 person-days short of the capacity needed by 2027-05-21. Forecast finish 2027-07-02 is 42 days after the target.
May 21, 2027
  1. Site
    Chicago
    Identity Access ModernizationProgram
    USD 95M

    Recommendation

    Close the 4.5 person-day shortfall: confirm capacity, reduce remaining scope, or agree a revised target.4.5 person-days short of the capacity needed by 2027-05-21. Forecast finish 2027-07-02 is 42 days after the target.
    NeededMay 21, 2027